Close Menu
Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    Facebook X (Twitter) Instagram
    Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    • Home
    • Intune
    • Windows
      • Modern Workplace
    • macOS
    • Android
    • iOS
    • Automation
      • Logic Apps
      • Intune Monitoring
      • GitHub
    • Security
      • Passwordless
      • Security
    • Speaking
    • About me
    Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    Home»Microsoft365»What is Azure Recovery Services vault?
    Microsoft365

    What is Azure Recovery Services vault?

    Peter KlapwijkBy Peter KlapwijkOctober 14, 2016Updated:December 3, 20196 Mins Read

    Azure Recovery Services vault exists of Azure Backup and Site Recovery, two services that provide you the ability to protect your data outside your own data center. With Azure Backup you have a backup solution which replicates your backup data to the Azure cloud, so your data is save outside your own data center without the need to use backup tapes. Azure Site Recovery provides you a failover solution for your server infrastructure, without the need to setup an second data center or rent some rack space.

    Azure Backup

    azure-backup-what-to-backup

    With Azure Backup you have the ability to back-up virtual machines running on Azure or on-premises and applications like Microsoft Exchange and SharePoint.
    If you only want an option to back-up files and folders outside of your own data center, it is very easy to setup. The only thing you have to do is install the Azure Recovery Services Agent and you are good to go. You setup an backup schedule, choose your files and folders, when you want to run the schedule and the last setting is the retention policy. That`s all to start a file/ folder backup to Azure.
    If you have to backup your on-premises virtual servers, your Active Directory or an application like Exchange, it gets a bit more complicated but not to complicated; you have to setup a server (physical or virtual on Hyper-V or VMware) with Azure Backup Server (MABS), which is functionally equivalent to System Center DPM, but without tape support and no integration with System Center components. After setting this up you have to setup your protection group by running a wizard and pick you settingsazure-backup-protection-group. A requirement is the short-term retention to a local disk (which is set by default to 5 days), it allows you to recover from a local backup in a short time. An option (not a requirement) is to replicate your backup data to Azure for long term protection. You are free to choose what to replicate to Azure, which gives you the option not to replicate all local backup data to Azure.
    MABS is free to use, you pay by protected instance ($5 or $10, depending on the size) and you have to pay for the storage you use in Azure (price depending on local or geo redundant storage). So if you only use MABS to backup a few servers to local disk, you only have to pay the price per instance and and will pay extra when replicating to Azure.
    A great benefit of Azure Backup is the great retention time when you replicate to Azure; by default the daily backup is set to 180 days, weekly for 104 weeks, monthly for 60 months and the year retention is set to 10 years! Off course you have to pay for the storage you will use, but you don`t have the challenge to restore your data from an ten years old backup tape.

    Next to the benefits like easy to setup, great retention policies and competitive pricing there is a disadvantage in my opinion at the time of writing, Azure Backup does not support item level recovery. But Microsoft releases every month new features to the Azure services they provide, it might be supported in a near future.

    Azure Site Recovery

    The second service as part of Azure Recovery Services vault is Azure Site Recovery. With Site Recovery you have the ability to replicate servers outside of your own data center to Azure, it does not matter if these servers a physical or virtual running on Hyper-V (with or without System Center VMM) or on VMware. It also allows you to replicate SC VMM or VMware virtualized servers to a recovery site running SC VMM or VMware.
    asr-hyper-v-host-architectureAs an example you can use Site Recovery as a recovery site for your Hyper-V infrastructure without setting up a second data center yourself (with al the maintenance involved). Just install the Azure Site Recovery Provider agent on the Hyper-V host and you are able to replicate the vm`s to Azure. You are able to choose the replication interval, recovery point retention and app-consistent snapshot frequency. Site Recovery supports replication of servers running different sorts of applications, like Active Directory, Files server or SharePoint (see this site for a recent list of supported applications). After replication is enabled for you servers and the status is protected, you can perform a test failover (to test your replication strategy), planned failover (as an example for maintenance) or an unplanned failover (if the original server is down). You can perform a failover of one server, but you can also setup a recovery plan which contains several servers. If for an example you have a website running with a database on the back-end, you want the server with the database to be available before the website is brought back online. You can specify which server needs to be brought back online as first, which one as second and so on.
    Replicating an Domain Controller is supported from on-premises to Azure with ASR, but think of the setup in which you have an site-to-site VPN from your data center to Azure, deploy an Domain Controller with DNS on Azure which holds all your AD information. It guarantees you don`t have data loss and you are able to deploy RDS or Citrix servers so your users can even access the data when the complete site goes down and even the VPN connection is unavailable. Just perform a failover of the protected servers, turn on the RDS Servers (turn them off when not used to save some money) and your back in business.
    There are a lot of different scenarios possible using Azure Site Recovery as you can image and they are pretty easy to setup.

    Azure Site Recovery is billed by the instance protected ($25) and the amount of storage you use, more details on pricing you can find on this site. If you want to give it a try; every instance that is protected is free for the first 31 days!

    Azure Backup
    Share. Facebook Twitter LinkedIn Email WhatsApp
    Peter Klapwijk
    • Website
    • X (Twitter)
    • LinkedIn

    Peter is a Security (Intune) MVP since 2020 and is working as Modern Workplace Engineer at Wortell in The Netherlands. He has more than 15 years of experience in IT, with a strong focus on Microsoft technologies like Microsoft Intune, Windows, and (low-code) automation.

    Related Posts

    Skype for Business PSTN Calling in The Netherlands and Ireland

    March 7, 2017

    Issues with OneDrive sync client – Preview – UPDATED

    November 18, 2016

    How to protect against ransomware?

    September 15, 2016
    Add A Comment
    Leave A Reply Cancel Reply

    Peter Klapwijk

    Hi! Welcome to my blog post.
    I hope you enjoy reading my articles.

    Hit the About Me button to get in contact with me or leave a comment.

    Awards
    Sponsor
    Latest Posts

    Update Windows Defender during Windows Autopilot enrollments

    May 16, 2025

    Hide the “Turn on an ad privacy feature” pop-up in Chrome with Microsoft Intune

    April 19, 2025

    How to set Google as default search provider with Microsoft Intune

    April 18, 2025

    Using Windows Autopilot device preparation with Windows 365 Frontline shared cloud PCs

    April 13, 2025
    follow me
    • Twitter 4.8K
    • LinkedIn 6.1K
    • YouTube
    • Bluesky 1.5K
    Tags
    Administrative Templates Android Automation Autopilot Azure Azure AD Browser Conditional Access Edge EMS Exchange Online Feitian FIDO2 Flow Google Chrome Graph Graph API Identity Management Intune Intune Monitoring iOS KIOSK Logic Apps macOS MEM MEMMonitoring Microsoft 365 Microsoft Edge Microsoft Endpoint Manager Modern Workplace Office 365 OneDrive for Business Outlook Passwordless PowerApps Power Automate Security SharePoint Online Teams Windows Windows 10 Windows10 Windows 11 Windows Autopilot Windows Update
    Copy right

    This information is provided “AS IS” with no warranties, confers no rights and is not supported by the authors, or In The Cloud 24-7.

     

    Copyright © 2025 by In The Cloud 24-7/ Peter Klapwijk. All rights reserved, No part of the information on this web site may be reproduced or posted in any form or by any means without the prior written permission of the publisher.

    Shorthand; Don’t pass off my work as yours, it’s not nice.

    Recent Comments
    • Adam on Get notified on expiring Azure App Registration client secrets
    • Peter Klapwijk on Update Windows Defender during Windows Autopilot enrollments
    • Rob van de Ven on Add a certificate to the Trusted Publishers with Intune without reporting errors
    • Carl on Update Windows Defender during Windows Autopilot enrollments
    • Peter Klapwijk on The next step in a passwordless Windows experience
    most popular

    Application installation issues; Download pending

    October 1, 2024

    Restrict which users can logon into a Windows 10 device with Microsoft Intune

    April 11, 2020

    How to change the Windows 11 language with Intune

    November 11, 2022

    Update Microsoft Edge during Windows Autopilot enrollments

    July 9, 2024
    Peter Klapwijk – In The Cloud 24-7
    X (Twitter) LinkedIn YouTube RSS Bluesky
    © 2025 ThemeSphere. Designed by ThemeSphere.

    Type above and press Enter to search. Press Esc to cancel.

    Manage Cookie Consent
    To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
    Functional Always active
    The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
    Preferences
    The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
    Statistics
    The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
    Marketing
    The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
    Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
    View preferences
    {title} {title} {title}